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Docket 1 929-P000 1 C 



ELECTRONIC CASH ELIMINATING/PAYMENT RISK 



This is a^cpntinuation in part of my copending application Serial No. 
08/465,430, filed June 5, 1995; which is a continuation in part of application serial 
no. 08/015,588, filed February 10, 1993, now abandoned. 

Field of the Invention / 

This invention relates to electronic transaction systems, and more 
specifically to a system using an asset-b^sed electronic cash system, using public 
key digital signature systems, for settlement of payment obligations. 

Background of the Invention / 

Recent advances in the field of cryptography have made possible the 
secure and privacy-protected transfer of digital information over insecure, open 
communication channels suchf as the global computer network known as the 
"Internet", by using public key encryption technologies. 

Public key encrypt/on methods have been developed for use in electronic 
cash. In one such method known as the RSA algorithm, encryption and 
decryption are accomplished by two mathematical equations which are related as 
inverses of each other. / These equations are the private key, used by the issuing 
financial institution to digitally sign, or certify, a note, and the related public key, 
used by the recipient to determine and verify the existence of a valid signature on 
the note. Such protocols are known in the art and are described for example in 
Chaum, U.S. patent No. 4,759,063, the disclosure of which is hereby incorporated 
by reference. / 
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In addition to such digital signature methods for certifying a digital note, a 
blind signature protocol has been developed so that the certifying financial 
institution cannot determine the note which it has certified, allowing the user to 
maintain his privacy. In such systems the user "blinds" the note he submits to the 
5 financial institution for its digital signature, the financial institution applies its 
digital signature to certify the note, and the user then unblinds the note and uses it 
to make a payment to a payee. A blind signature system is described in Chaum, 
U.S. Patent 4,759,063 which has been incorporated by reference, and is in 
commercial use by DigiCash b.v. of the Netherlands. 

10 In order to prevent a user from spending the note more than once, methods 

have been developed for testing the note to determine if it has already been spent. 
In one such system, if a note is spent twice, the identity of the user is revealed. 
Such a system is more suitable for lower value payments and is disclosed for 
example in Chaum, U.S. Patent No. 4,914,698. For higher value payments, the 

15 payee will verify the status of the received note with the issuing financial 
institution, which will keep a database of issued and spent notes. 

In still other methods, notes may be generated that can have plural 
currency values (like a wallet containing $10, $5, and $1 bills) or which can have 
a variable value as portions of the note are spent. Such methods are disclosed in 
2 0 Chaum, U.S. patent No. 4,949,380, which is hereby incorporated by reference. 

In summary, such public key signature systems allow an issuing financial 
institution to digitally sign an electronic note with its secret key such that the user, 
and the ultimate payee, can verify the authenticity of the note and the ability to 
make payment. The blinding protocol protects the user's privacy by preventing 
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the financial institution from tracing a note subsequently presented to it for 
payment as cash. 

In such systems, the electronic note signed by the issuing financial 
institution is denominated in a national currency. In my prior copending 
5 application no. 08/465,430, which is hereby incorporated by reference, I have 
described the problems associated with payment systems based on national 
currencies and the problems associated with common banking practices. 

A particular problem is the payment risk now inherent in existing payment 
mechanisms, and the problem of "float." Payment risk arises in conventional 

1 0 banking systems where a financial institution accepts deposits, then in turn loans out 
that money to others. This is known as "fractional banking," in that the financial 
institution only keeps on hand a fraction of the actual assets it is holding for the 
account of its depositors. If the financial institution fails due to bad loans or fraud, 
the financial institution lacks sufficient assets to pay off its depositors. This practice 

1 5 has lead to significant losses in connection with financial institution failures such as 
at the Herstatt Bank in Germany and the BCCI scandal. A related payment risk 
arises due to the fluctuating value of national currencies due to inflation and 
currency exchange rate variations dependent on the economy of the nation issuing 
the currency. Thus, there is a risk incurred by accepting national currencies. 

2 0 "Float" is the amount of time a payee must wait for a transaction to be 

processed. This is considered an expense because of the unavailability of funds, 
which represents opportunity costs. In order to eliminate these payment risks and 
float, my invention disclosed in my copending parent application uses an asset (like 
gold) instead of a liability (national currency) for settling payments in a book- 

2 5 entry accounting system. 
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However, situations exist in which using a book-entry system for 
payments may be inexpedient or disadvantageous. In many cases, the payer 
and/or payee in a transaction may not want to be identified with a specific 
payment, preferring instead to remain anonymous. Currently, paper cash and 
5 metal coins provide such privacy in a transaction. Electronic cash also provides 
such privacy, although the payee can make himself known to the issuing financial 
institution as the recipient of anonymous funds when he redeems an electronic 
note for cash or other payment. 

Also, smaller payments (generally considered to be amounts of less than 
10 U.S. $10) may be uneconomical to process through a book-entry system, because 
double-entry bookkeeping generally involves relating particular credits and debits 
to particular accounts, i.e., correctly identifying the payer and the payee with each 
transaction and the amounts involved. The cost of knowing the identities of 
customers is high if it requires human operators to verify this information. 

15 Accordingly, it would be desirable to provide a system that provides 

anonymity to one or more parties in a payment transaction, and provides the 
advantages of elimination of payment risk as described and claimed in my prior 
parent application. 

Objects of the Invention 

2 0 Accordingly, it is an object of the present invention to increase efficiency 

and surety of electronic cash payments by introducing a digital transaction system 
whose unit of account is an asset, as opposed to all other current electronic cash 
whose units of account are liabilities, thereby eliminating problems of payment 
risk inherent in current banking and electronic cash systems. 
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Another object is to increase security and privacy of said asset-based 
digital transaction system by using public key encryption with digital signature 
methods preferably coupled with blind signature methods. 

Other objects, aspects and features of the present invention in addition to 
5 those mentioned above will be pointed out in or will be understood from the 
following detailed description provided in conjunction with the accompanying 
drawings. 

Brief Description of the Drawing 

Figure 1 shows a flowchart illustrating the operation of an asset-based 
1 0 electronic cash system in accordance with the invention. 




DETAILED DESCRIPTION OF THE INVENTION 



A glossary of the terms used in the present application is provided 
hereafter. 

As used herein, a "book-entry system" - also called "double-entry 
15 bookkeeping," is a bookkeeping method of accounting in which a debit in one 
individual's account is also entered as an equivalent credit in another individual's 
account, and vice versa. All banks currently use this method of accounting when 
handling currency payments with other banks as well as between customers 
within the same financial institution. 

20 As used herein, "client software" is a software application which runs on 

an individual's computer, allowing him to verify and exchange ecoins with the 
emint, to send and receive ecoins from other individuals, and to manage his ecoins 
stored in the memory of his computer. 
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As used herein, "Digital Hallmark™" is a digital signature or any other 
protocol for cryptographic authentication attached to each ecoin by the emint that 
certifies the genuineness of information embedded in the ecoin. 

As used herein, "digital signature" is information generated by a private 
5 key applied and appended to electronic data. If the electronic data is not altered 
after the digital signature has been applied, the signature will verify the 
authenticity of the electronic data when checked with the corresponding public 
key. 

As used herein, "ecoin" is the electronic representation of a valuable 
10 commodity, preferably, a precious metal such as gold, platinum, palladium, or 
silver, which is held for safekeeping at a storage site. Each ecoin comprises a 
unique serial number, a measure of the valuable commodity (for example, grams 
or ounces, and fractions thereof) that it represents, the name of a specific storage 
site where the valuable commodity is stored, and a date/time stamp of when the 
1 5 ecoin was created. Each ecoin may appear as a string, of alphanumeric characters 
which may also be encrypted and/or digitally signed for security. 

As used herein, "encrypt" is to scramble data so as to prevent unauthorized 
reading. 

As used herein, "public key" is a mathematical key which is available 
2 0 publicly and which is used to verify digital signatures created with the matching 
private key, and in the context of encrypted communications is used to decrypt 
electronic data which can only be encrypted using the matched private key. 
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As used herein, "public key cryptography" is a technique for encrypting 
data by which the key used to decrypt the message is different from the key used 
to encrypt the message. The digital signature defined above is an application of 
public key cryptography in that the key used to verify the signature is different 
5 from the key used to sign the signature. 

As used herein, "private key" is a mathematical key which is kept private 
to the owner and which is used to create digital signatures, and in the context of 
encrypted communications, is used to decrypt electronic data encrypted with the 
corresponding public key. 

10 As used herein, "storage site" is a secure facility (e.g., a vault) in which 

the valuable commodity (e.g., gold) is held for safekeeping. Preferably there are 
several storage sites for storing the commodity. The storage sites are preferably 
located in countries having secure and stable political systems where there is 
minimal risk of misappropriation of the asset by the government or private persons. 

1 5 The storage sites will typically be a precious metal repository; however, other secure 
vault facilities could also serve as the storage site. Typical site locations would be 
London, New York, Zurich and Tokyo, as well as other locations. 

The storage site provides facilities for safe and secure storage of the 
commodity to be used as the asset basis for the electronic cash. Typically such 

2 0 storage site consists of a protected vault. The precious metal repository or protected 
vault that is servicing the system users will have the ability to (1) receive the 
commodity from a client, (2) return the commodity to a client, (3) test the purity of 
the commodity, (4) measure the weight and/or other physical properties of the 
commodity, (5) provide identifying information for each parcel of the commodity 

25 placed within the storage site in order to distinguish between the different parcels 
belonging to the different clients of the storage site, (6) report to the emint and/or 
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client the quantity of the commodity stored by the client at the storage site, and (7) 
provide identifying information and the capability to physically separate from the 
total quantity of the commodity stored in the storage site those parcels of the 
commodity to be designated for use as currency. 

5 The valuable commodity stored at each storage site must be non-perishable, 

and most preferably has a high ratio of value to weight and volume. In a preferred 
embodiment, the commodity comprises a precious metal, such as platinum, 
palladium, or silver, or most preferably, gold of a specified purity. In the following 
discussion, gold is given as the example usage, but it is to be appreciated that other 
1 0 precious metals, tangible assets, and valuable commodities could also be used. 

The "emint" is a computer and communications system which creates, 
distributes and verifies the authenticity of ecoins, and which receives information 
from the storage sites regarding gold held there for storage and specifically identified 
for use in the digital cash system. 

15 The system of the invention requires some system users to establish a 

fiduciary relationship with a storage site. The relationship is confirmed when a 
system user either (1) stores gold with, or (2) purchases from another person gold 
already held at one or more storage sites. In the first case, the storage site verifies 
the receipt of the gold and provides confirmation to the system user specifying the 

2 0 pure weight and/or other physical attributes of the gold. In the second case, the 
storage site records the transfer of gold from one system user to the other. 

Then the system user informs the storage site that he wishes to allocate some 
or all of his gold for use in the digital cash system. The storage site separates this 
specific weight of gold to be used as currency in a separate area of the vault, 
2 5 designated solely for storing gold in use as electronic cash issued by the emint. The 
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storage site then notifies the emint by data transmission of the exact weight of gold 
to be created as ecoins. 

The emint electronically creates ecoins in a variety of weights. Each ecoin 
includes information embedded in it comprising: a unique serial number, the 
5 weight (denominated in either grams or ounces or other physical measurement) of 
the gold that it represents, the name of the storage site where the gold is stored, 
and the date that the ecoin was created. The emint maintains a database of each 
ecoin it issues, identified by serial number. When anonymity to the users of the 
system is not assured, the database of the emint may also include the information 
1 0 embedded in the ecoin, such as the weight, identification of the storage site, and 
the date and time of issue. 

Using public key cryptography the emint digitally signs each ecoin with its 
private key, thus providing each ecoin with a Digital Hallmark™. Blinding 
techniques may also be used to ensure the privacy of the user (the payer) of the 
15 ecoin. The Digital Hallmark™ allows an individual running the emint's client 
software to verify that an ecoin was in fact issued by the emint and is not a 
forgery. 

Although the Digital Hallmark™ prevents an individual from creating 
fraudulent ecoins, it does not prevent him from duplicating real ecoins (which can 
20 be simply a string of text, and thus easily replicated) in an attempt to spend them 
twice. For instance, the emint may issue an ecoin to someone who then makes 
five copies and sends them to five different people. 

To prevent multiple spending of the same ecoin, the emint maintains a 
database of serial numbers of every circulating ecoin so that a payee can contact 
2 5 the emint and confirm the value of each ecoin received (i.e., to make sure the 
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serial number in the database is not recorded as already spent). Confirmation of 
value may be made nearly instantaneously. 

A payee, who has confirmed the value of the ecoin, may then tender it to 
the emint. Upon tender, the emint will record the serial number of the tendered 
5 ecoin as a "spent" ecoin, so that it may not be subsequently reused by the user. 
The payee can request that the emint treat the tendered ecoin in different ways. 
The emint could be requested to credit the tendered ecoin to the payee's gold 
safekeeping account with the storage site; or the payee could request that the units 
of gold represented by the ecoin be converted to a national currency such as U.S. 
1 0 Dollars and that the U.S. Dollars be transferred by check, wire or other methods to 
another account; or the payee could request the issuance of a new ecoin to be 
delivered to the payee for use by the payee in other transactions. 

It is to be appreciated that the emint will be responsible for collecting 
storage fees associated with the stored gold in the digital cash system held for the 

15 benefit of the system users. Usually such fees may be periodically charged 
against the amount of gold in a user's safekeeping account at the storage site. 
However, when an ecoin has been issued, the gold on account for a system user is 
treated as withdrawn from the user's safekeeping account in exchange for the 
ecoin. The emint will desirably recover the storage costs associated with the 

2 0 stored gold that has been converted to ecoins in some way. It is to be appreciated 
that it would not be feasible to simply charge the user to whom the ecoins were 
issued during the length of time between issuance and tendering of the ecoin, as 
this would permit an identification of the link between the user and the payee, 
since to charge the user for the storage costs that might be associated with an 

2 5 ecoin presented by a payee, the user-payor must necessarily be identified. This 
approach would compromise the desired privacy of the payment transaction. 



# 
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One method to recover storage costs would be to simply charge a 
transaction charge associated with the issuance of the ecoin, such that over time, 
and on an average basis the emint is able to recover the storage costs. A more 
sophisticated method would be to collect the storage costs from the tendered 
5 ecoin. Obviously, the payee may not wish to be responsible for the prior incurred 
storage costs of the user, and thus, as part of the confirmation process, the amount 
of the storage fee cost would need to be reported. This cost would be determined 
simply from the information embedded in the electronic coin, specifically, based 
on the date/time stamp showing the moment of issuance of the electronic coin, 
1 0 and the weight of gold involved. 

The client software could be designed to calculate the storage fees 
associated with an ecoin upon its receipt. Alternatively, as part of the value 
confirmation process, a report to the payee could include both whether or not the 
ecoin was valid, and its net value after the storage costs are deducted, and any 

1 5 other costs that might appropriately be charged by the emint, as for example, a 
processing charge for the confirmation or for handling the tender of the ecoin. 
Thus, for example, if a payee receives several ecoins with a value of 1.237 grams 
of gold, this weight of gold may be reduced, for example, to 1.235 grams, upon 
confirmation at the emint because of the storage fee they have accumulated while 

2 0 being held by the payer. 

The client software can be set up by a payee to define what is an 
acceptable net value of ecoins received from the user (payer). If the storage fee is 
sufficiently high such that the net value of the ecoins is less than the acceptable 
net value, the ecoins are returned by the payee to the payer with notification of 
2 5 their rejection by the payee. The payer may then choose to forgo the transaction, 
or he must provide the payee with additional or substitute ecoins. 
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In another embodiment, the client software can be set up by a payee to 
define what is an acceptable storage cost to accept, and if the storage fee exceeds 
the predefined amount, the same process of rejection will occur. 

In one embodiment of the invention, the value confirmation and tendering 
5 steps are not permissible as separate transactions, but instead are always 
performed concurrently. In such case, the default mode of operation will have the 
emint issue new ecoins and transmit them to the party requesting confirmation of 
ecoins, less the appropriate fees, whenever an ecoin is submitted for confirmation. 

The anonymity and privacy of the payee is particularly protected where 
10 the payee simply requests issuance of a new ecoin (instead of a deposit to an 
existing account or conversion to national currency). In this case, the emint's 
process includes the following steps: (1) the emint records the serial numbers of 
the received ecoins to designate them as spent, (2) computes a confirmation fee 
and, if appropriate, a storage fee, (3) creates new ecoins (with different serial 
1 5 numbers) that represent the value of the old ecoins less the confirmation fee and 
any storage fee, and (4) then electronically sends the new ecoins to the payee. 
This payee can then make further payment transactions in the same way as the 
original user. It is noted that in this type of transaction, in order to preserve the 
anonymity of the payee, the emint may choose not to take note of the identity of 
2 0 who is being issued the new ecoins. The emint operates solely as a database for 
outstanding and spent ecoins. Its only ftinctions are to confirm ecoins at a payee's 
request, issue new ecoins, and collect the appropriate confirmation and storage 
fees. The emint may also incorporate blind signatures into its Digital Hallmark™ 
to further advance user privacy. 

2 5 An example of an asset based electronic cash system in accordance with 

the invention is shown in Figure 1. Customer(i) 10 stores gold at a storage site 12 
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and requests the storage site to send him ecoins (arrow A). The storage site 
contacts the emint 14 and informs it of the receipt of new gold (arrow B). 

The emint creates ecoins (not shown) whose total sum represents the exact 
weight of new gold and transfers the newly created ecoins to the storage site, each 
5 ecoin containing a Digital Hallmark™ used for verification purposes (arrow C). 
After obtaining the client software, which is necessary in order to receive ecoins 
from others and to confirm with the emint the value of each ecoin received, 
Customer(i) contacts the storage site to receive the ecoins and the ecoins are 
transferred to him (arrow D). The customer may then verify the Digital 

10 Hallmark™ applied thereto using the emint's public key. Customer(i) can also 
send the ecoins to the emint for confirmation (arrow E). The emint then confirms 
the value of the ecoins. As noted above, the emint may be set up so that upon a 
request for confirmation, the emint automatically retires the ecoins, deducts the 
confirmation and storage fees, then creates and sends back new ecoins to 

1 5 Customer(i) (arrow F). 

Alternatively, the emint could transmit the ecoins directly to Customer (i), 
who can verify the Digital Hallmark™ applied thereto using the emint's public 
key. 

Once Customer(i) receives the ecoins, he can transfer the ecoins while 
2 0 online to Customer(ii) 16, who also has the client software, for the payment of 
goods or services (arrow G). Customer(ii) then can send the ecoins to the emint 
for confirmation (arrow H). The emint then confirms and retires the coins, 
deducts storage and confirmation fees, then creates and sends new ecoins back to 
Customer(ii) (arrow I). Customer(ii) need not have an account relationship with 
2 5 the storage site. Customer(ii) can then send the ecoins to Customer(iii) 18, who 
also has the client software, for the payment of goods or services (arrow J). 
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Customer(iii) can then send the ecoins to the emint for confirmation (arrow K). 
The emint confirms and retires the ecoins, deducts storage and confirmation fees, 
then creates and sends new ecoins back to Customer(iii)(arrow L). 



Ecoins are taken out of circulation when a party, such as Customer(iii), 
5 sends ecoins to the storage site and requests redemption of them into gold bullion 
(arrow M). The storage site sends the ecoins to the emint for confirmation, along 
with a message saying that the gold is being redeemed (arrow N). The emint 
verifies the ecoins, deducts the appropriate storage and confirmation fees, and 
sends a message back to the storage site stating the exact weight of gold left over 
10 (i.e., the weight of gold originally represented by the ecoins less the 
storage/confirmation fees) for redemption (arrow O). The storage site then ships 
the specified weight of gold bullion to the individual who requested it (arrow P), 
or enters a credit for an amount of gold held for safekeeping for Customer (iii) at 
the storage site, or takes such other actions as instructed. 



15 It is to be appreciated that the foregoing is illustrative and not limiting of the 

invention, and that various changes and modifications to the preferred embodiments 
described above will be apparent to those skilled in the art. Such changes and 
modifications can be made without departing from the spirit and scope of the present 
invention, and it is therefore intended that such changes and modifications be 

2 0 covered by the following claims. 



